---
title: API: host tags, host incidents in the summary, masked URLs in incidents
description: Three things the API got wrong. Host tags always came back as an empty list — they are now key=value strings (env=prod), the same chips the dashboard shows…
canonical: https://watchfor.io/changelog/2026-09-23-api-hosts-and-redaction
---

[All updates](/changelog/page/2#2026-09-23-api-hosts-and-redaction) 🐛 Fixed Sep 23, 2026 · v 8.2.7

# API: host tags, host incidents in the summary, masked URLs in incidents

Three things the API got wrong. Host tags always came back as an empty list — they are now key=value strings (env=prod), the same chips the dashboard shows. GET /v1/summary left host incidents out of its incident counts while the dashboard counted them; a silent agent or a full disk is now a firing incident in both. And the fire-time snapshot on an incident now masks credentials inside URLs (user:pass@, ?token=) the way the probe result view does, not only values under secret-looking keys. The MCP maintenance filter offers only the states the API accepts.

Share this update

---

Canonical page: https://watchfor.io/changelog/2026-09-23-api-hosts-and-redaction · Site guide: https://watchfor.io/llms.txt